webauthn fits a different use, of the browser managing keys for the user, outside the page & the server's view.

and webusb explicitly blacklists fido2 keys &c.

madness that our security devices only use is to identity us securely (and in a way where afaik we have no ability to clone identities, &c, by design. scant, limited powers over these devices), and not to protect our content.